Description
PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.
Unscored
CVE-2022-37140
EUVD-2022-39793GHSA-v78j-fp7j-4hfj
PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the…
Published Sep 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre